Hardware Key Backup via Server Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Local storage of hardware keys for multiple user devices is impractical for entities managing tens, hundreds, or thousands of devices, as it requires significant computing resources and increases the risk of security breaches during data recovery processes.
Innovation Solution
A system where user devices automatically back up hardware keys to a server device using multiple encryption steps and a secure connection, allowing for centralized storage and retrieval, reducing resource utilization and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware keys are stored locally on user devices, then security is maintained, but resource utilization increases and security breaches risk increases during data recovery
Solution Approach 1:
The patent extracts the hardware key backup function from individual user devices and centralizes it on a server device. The server stores encrypted hardware keys, allowing user devices to retrieve them when needed. This extraction resolves the contradiction by removing the burden of local storage (reducing resource utilization) while maintaining security through encrypted storage and controlled access on the server.
Solution Approach 2:
The patent introduces an intermediary system consisting of the server device and encrypted storage infrastructure. This intermediary handles the secure storage and retrieval of hardware keys, eliminating the need for each user device to maintain its own backup storage. The intermediary resolves the contradiction by providing centralized, secure storage that reduces individual device resource requirements while maintaining or enhancing security through professional-grade encryption and access control.
2Loss of time
If hardware keys are stored locally on user devices, then quick access is achieved, but the risk of security breaches increases during data recovery processes
Solution Approach 1:
The patent implements preliminary action by pre-configuring the server device with encrypted storage and access control mechanisms before any hardware key backup occurs. The encryption keys and security protocols are established in advance, allowing rapid retrieval of hardware keys without requiring security breaches or complex authentication processes during recovery. This preliminary setup resolves the contradiction by enabling fast access while maintaining security through pre-established secure channels.
Solution Approach 2:
The patent creates encrypted copies of hardware keys on the server device rather than storing plaintext copies locally. These encrypted copies can be rapidly retrieved and decrypted when needed, providing both speed and security. The copying principle resolves the contradiction by allowing multiple secure instances of the hardware key to exist simultaneously - one on the user device for immediate use and encrypted copies on the server for backup and recovery.
3Reliability
If multiple user devices back up hardware keys locally, then each device maintains security, but significant computing resources are required
Solution Approach 1:
The patent merges the hardware key backup functionality across multiple user devices into a single centralized server device. Instead of each device independently maintaining backup storage and encryption capabilities, these functions are combined on the server. This merging resolves the contradiction by consolidating computing resources required for encryption and storage on the server, while user devices only need minimal resources for key generation and retrieval operations.
Solution Approach 2:
The patent makes the server device universal by enabling it to serve multiple user devices simultaneously for hardware key backup and retrieval. The server implements multi-functional capabilities to handle encryption, decryption, storage, and access control for numerous devices through a single system. This universality resolves the contradiction by allowing one server to replace multiple individual backup systems, significantly reducing total computing resources while maintaining security through centralized control.
Data Source
AI summary
A user device may determine to back up a hardware key that is associated with a hardware component of the user device. The user device may determine that the user device has an operation key. The user device may retrieve the hardware key from a first data structure that is included in the user device and may encrypt, based on the operation key, the hardware key. The user device may process, after encrypting the hardware key, the hardware key to generate a hash value and may determine that the hash value is not included in a registry of the user device. The user device may transmit, based on determining that the hash value is not included in the registry, the encrypted hardware key to a server device to cause the hardware key to be backed up in a second data structure associated with the server device.